I am using a i/soft hosted webform to allow my contacts in the uK to look at the data we are holding on them - a GDPR issue and a way to check what we have is correct.
We have had some contacts come back and say that although it is their data in the webform, it is unsecured via the link in the email AND on the webform.
I know that when the link is clicked from the email account that matches the email address used and the first name or last name are the same as the isoft record that it then mirrors the data into the various fields.
What other security do we have that I can share with them?
Thanks